grsecurity module: correct internal note
This commit is contained in:
		
							parent
							
								
									5d11dac8bb
								
							
						
					
					
						commit
						d1572d06fe
					
				@ -97,7 +97,7 @@ in
 | 
			
		||||
 | 
			
		||||
    # Configure system tunables
 | 
			
		||||
    boot.kernel.sysctl = {
 | 
			
		||||
      # Removed under grsecurity
 | 
			
		||||
      # Read-only under grsecurity
 | 
			
		||||
      "kernel.kptr_restrict" = mkForce null;
 | 
			
		||||
    } // optionalAttrs config.nix.useSandbox {
 | 
			
		||||
      # chroot(2) restrictions that conflict with sandboxed Nix builds
 | 
			
		||||
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user